Describe the capabilities of Microsoft compliance solutions →mediumMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

{
  "PolicyName": "GDPR Data Subject Rights Policy",
  "PolicyType": "CommunicationCompliance",
  "Conditions": {
    "SensitiveInfoTypes": [
      "EU GDPR Personally Identifiable Information"
    ],
    "SentTo": [
      "privacy@contoso.com"
    ]
  },
  "Actions": [
    "NotifyPolicyOwner",
    "GenerateCase"
  ]
}

Refer to the exhibit. You are reviewing a Communication Compliance policy. What does this policy do when a user sends an email containing EU GDPR PII to privacy@contoso.com?

⚠ Common exam trap

Candidates often confuse Communication Compliance with Data Loss Prevention (DLP), assuming that any policy detecting sensitive data will automatically block the email, but Communication Compliance is purely detective and investigative, not preventative.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

It notifies the policy owner and generates a case for investigation.

Communication Compliance policies in Microsoft 365 are designed to detect and investigate policy violations, not to enforce real-time blocking or automated deletion. When a user sends an email containing EU GDPR PII to a specified recipient like privacy@contoso.com, the policy triggers an alert, notifies the policy owner, and generates a case for investigation in the Compliance Center. This allows organizations to review and remediate potential data privacy violations without disrupting email flow.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
It blocks the email from being sent.
Why it's wrong here
Microsoft Purview Communication Compliance is designed for monitoring and investigating potential policy violations within an organization's communications, not for preventing the transmission of messages. Its operational model involves detecting policy matches post-send or post-delivery, then triggering alerts or cases for review. Therefore, it does not possess the functionality to block an email from being sent in real-time.
✓
It notifies the policy owner and generates a case for investigation.
Why this is correct
This option accurately describes the primary actions configured within a Communication Compliance policy when a violation is detected. The system is engineered to notify designated policy owners or reviewers and automatically generate a case within the Microsoft Purview compliance portal. This workflow facilitates a structured investigation and remediation process for identified policy breaches.
✗
It automatically deletes the email after 30 days.
Why it's wrong here
Communication Compliance policies are focused on detection, alerting, and investigation of policy violations, not on data lifecycle management. Automatic deletion of emails after a specific period, such as 30 days, is typically managed by Microsoft Purview Data Lifecycle Management (formerly Microsoft 365 Retention) policies. Communication Compliance policies do not include an action to automatically delete content.
✗
It applies a sensitivity label to the email.
Why it's wrong here
Applying sensitivity labels is a core function of Microsoft Purview Information Protection, which focuses on classifying and protecting data based on its sensitivity. Communication Compliance policies, however, are designed to identify and investigate policy violations within communications, such as harassment or regulatory non-compliance. They do not have the capability to automatically apply sensitivity labels as a remedial or protective action.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question